Privacy Policy
Last updated: 3 October 2026
This privacy policy explains how Fixidea Coatings Ltd ("we", "us", "our") collects, uses and protects personal data when you use our website www.fixidea.co.uk, contact us or work with us. We are committed to handling personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR) and, where it applies to people in the European Union, the EU General Data Protection Regulation (EU GDPR).
1. Who we are
Fixidea Coatings Ltd is the data controller for the personal data described in this policy.
- Company name: Fixidea Coatings Ltd
- Registered in England and Wales, company number 10187975
- Registered office: 141 Ashdown Drive, Crawley, England, RH10 5EG
- Email: [email protected]
We are a small business and are not required to appoint a Data Protection Officer. Please send any privacy questions to the email address above.
2. The personal data we collect
We only collect the personal data we need. This may include:
- Enquiry details - when you use our quote form or email us: your name, company name, email address, phone number, site location, your role, details of the building and the work required, and any photos or documents you send.
- Calls and messages - if you phone or message us, your phone number and the content of the conversation.
- Client and project records - for customers and contractors we work with: contact details, site addresses, quotes, contracts, invoices, payment records and project documentation such as RAMS, inspection and film thickness records.
- Technical data - when you visit our website: your IP address, browser and device type, and the pages you visit, recorded in server and security logs.
We do not knowingly collect special category data (such as health information) through this website, and we ask that you do not send it to us.
3. How and why we use your data
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry and preparing a quote | Taking steps at your request before entering into a contract; our legitimate interests in responding to business enquiries |
| Carrying out work, managing projects and providing documentation | Performance of a contract |
| Invoicing, accounting and tax records | Legal obligation |
| Keeping our website secure and preventing spam and fraud | Our legitimate interests in protecting our website and business |
| Health and safety records required on site | Legal obligation |
We do not sell your personal data, and we do not use it for automated decision-making or profiling. We will only send you marketing emails if you have agreed to receive them or, for existing business clients, where the law allows; you can opt out at any time.
4. Who we share your data with
We only share personal data where necessary, with:
- Website hosting - SuperHosting.BG, which hosts our website on servers in the European Union.
- Email - Google, which provides our email service.
- Website tools - WordPress plugins we use to run the website, such as our contact form, spam protection (Akismet, provided by Automattic) and security (Wordfence).
- Professional advisers - our accountants and, where needed, legal or insurance advisers.
- Project partners - main contractors, clients or suppliers where this is needed to carry out the work you have asked for.
- Authorities - HMRC, regulators or law enforcement where we are required by law.
These organisations only process your data on our instructions or under their own legal obligations.
5. International transfers
Some of our service providers, such as Google and Automattic, may process data outside the UK and the European Economic Area, including in the United States. Where this happens, we rely on recognised safeguards, such as adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, the UK International Data Transfer Agreement or Addendum, or the EU Standard Contractual Clauses.
6. How long we keep your data
- Enquiries that do not lead to work: up to 2 years from our last contact.
- Client, contract and financial records: 6 years after the end of the financial year they relate to, as required for tax and accounting purposes.
- Project documentation such as fire protection records: for as long as reasonably needed for warranty, insurance and legal purposes.
- Website security logs: usually no longer than 90 days.
7. Cookies
Our website uses only cookies that are strictly necessary for it to work and stay secure - for example, cookies set by WordPress, our security plugin and our page caching. These do not require your consent under PECR. We do not currently use analytics or advertising cookies. If we add them in future, we will ask for your consent first and update this policy.
8. Your rights
Under UK and EU data protection law you have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate or incomplete data;
- ask us to delete your data;
- ask us to restrict how we use your data;
- object to our use of your data where we rely on legitimate interests, and to direct marketing at any time;
- receive your data in a portable format, where applicable;
- withdraw consent at any time, where we rely on consent.
To exercise any of these rights, email [email protected]. We will respond within one month. There is normally no charge.
9. How we protect your data
Our website uses an encrypted (HTTPS) connection, and we use security software, strong passwords and access controls to protect the systems we use. Only people who need your data to do their job can access it.
10. Complaints
If you are unhappy with how we have handled your data, please contact us first and we will try to resolve it. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk or on 0303 123 1113. If you live in the European Union, you can also complain to the data protection authority in your country.
11. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.
